What’s your source for this?
Opening up an API does not mean that everything on the phone is accessible to anybody.
I think because they themselves have it access everything on the phone so it has to be equivalent.
Apple wrote a whole press release explaining it: https://www.apple.com/newsroom/2026/06/due-to-dma-siri-ai-de...
They’re actively asking developers to index all the content in their apps, to provide Personal Context that Siri can use for user requests. And to create/index the actions available in the app.
So, where developers comply, all of that content is now accessible to those alternative implementations.
It’s not full read/write of the phone, and it’d exclude obvious secrets like passwords, but it is quite far reaching access.
I don’t know what sort of restrictions they can put on the alternative implementations. Can I vibe code one and have it live in a week? or is there a minimum bar?